CVE-2009-1392

The browser engine in Mozilla Firefox 3 before 3.0.11, Thunderbird before 2.0.0.22, and SeaMonkey before 1.1.17 allows remote attackers to cause a denial of service memory corruption and application crash or possibly execute arbitrary code via vectors related to 1...

CVE-2009-1834

Visual truncation vulnerability in netwerk/dns/src/nsIDNService.cpp in Mozilla Firefox before 3.0.11 and SeaMonkey before 1.1.17 allows remote attackers to spoof the location bar via an IDN with invalid Unicode characters that are displayed as whitespace, as demonstrated by the \u115A through...

Firefox URL spoofing with invalid unicode characters

Visual truncation vulnerability in netwerk/dns/src/nsIDNService.cpp in Mozilla Firefox before 3.0.11 and SeaMonkey before 1.1.17 allows remote attackers to spoof the location bar via an IDN with invalid Unicode characters that are displayed as whitespace, as demonstrated by the \u115A through...

URL spoofing with invalid unicode characters — Mozilla

Mozilla add-on developer Pavel Cvrcek reported that certain invalid unicode characters, when used as part of an IDN, are displayed as whitespace in the location bar. This whitespace could be used to force part of the URL out of view in the location bar. An attacker could use this vulnerability to...

Microsoft IIS Security Bypass Vulnerability (970483)

This host is missing a critical security update according to Microsoft Bulletin MS09-020. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Safari < 4.0 Multiple Vulnerabilities

The version of Safari installed on the remote Windows host is earlier than 4.0. It therefore is potentially affected by numerous issues in the following components : - CFNetwork - CoreGraphics - ImageIO - International Components for Unicode - libxml - Safari - Safari Windows Installer - WebKit C...

Computer Associates SiteMinder - Unicode Cross-Site Scripting Protection Security Bypass

Computer Associates SiteMinder - Unicode Cross-Site Scripting Protection Security Bypass source: https://www.securityfocus.com/bid/36088/info Computer Associates SiteMinder is prone to a security-bypass vulnerability because it fails to properly validate user-supplied input. An attacker can explo...

Ubuntu: Security Advisory (USN-720-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu USN-764-1 (xulrunner-1.9)

The remote host is missing an update to xulrunner-1.9 announced via advisory USN-764-1. OpenVAS Vulnerability Test $Id: ubuntu7641.nasl 7969 2017-12-01 09:23:16Z santu $ $Id: ubuntu7641.nasl 7969 2017-12-01 09:23:16Z santu $ Description: Auto-generated from advisory USN-764-1 xulrunner-1.9 Author...

Solaris Update for International Components for Unicode 119810-05

Check for the Version of International Components for Unicode OpenVAS Vulnerability Test Solaris Update for International Components for Unicode 119810-05 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; y...

Solaris Update for International Components for Unicode 119811-05

Check for the Version of International Components for Unicode OpenVAS Vulnerability Test Solaris Update for International Components for Unicode 119811-05 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; y...

Solaris Update for International Components for Unicode 114677-15

Check for the Version of International Components for Unicode OpenVAS Vulnerability Test Solaris Update for International Components for Unicode 114677-15 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; y...

Solaris Update for International Components for Unicode 119811-05

Check for the Version of International Components for Unicode OpenVAS Vulnerability Test Solaris Update for International Components for Unicode 119811-05 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; y...

Solaris Update for International Components for Unicode 114678-15

Check for the Version of International Components for Unicode OpenVAS Vulnerability Test Solaris Update for International Components for Unicode 114678-15 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; y...

Solaris Update for International Components for Unicode 119810-05

Check for the Version of International Components for Unicode OpenVAS Vulnerability Test Solaris Update for International Components for Unicode 119810-05 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; y...

Solaris Update for International Components for Unicode 114677-15

Check for the Version of International Components for Unicode OpenVAS Vulnerability Test Solaris Update for International Components for Unicode 114677-15 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; y...

Solaris Update for International Components for Unicode 114678-15

Check for the Version of International Components for Unicode OpenVAS Vulnerability Test Solaris Update for International Components for Unicode 114678-15 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; y...

Mp3 Tag Assistant Pro 2.92 (tag metadata) Remote Stack Overflow PoC

Summary MP3 Tag Assistant Professional 2.92 is a professional-level audio tag editor with UNICODE support. Description MP3 Tag Assistant Professional 2.92 is vulnerable to a stack buffer overflow attack when loading a malicious mp3 file or file that supports tags filled with overly long A's in it...

CVE-2009-1633

Multiple buffer overflows in the cifs subsystem in the Linux kernel before 2.6.29.4 allow remote CIFS servers to cause a denial of service memory corruption and possibly have unspecified other impact via 1 a malformed Unicode string, related to Unicode string area alignment in fs/cifs/sess.c; or ...

Buffer overflow

Multiple buffer overflows in the cifs subsystem in the Linux kernel before 2.6.29.4 allow remote CIFS servers to cause a denial of service memory corruption and possibly have unspecified other impact via 1 a malformed Unicode string, related to Unicode string area alignment in fs/cifs/sess.c; or ...